Thinking...
[get complete service list]
Port Information
Protocol Service Name
tcp wsmans WBEM
tcp OMI Open Management Infrastructure
udp wsmans WBEM WS-Management HTTP over TLS/SSL
Top IPs Scanning
Today Yesterday
20.163.34.47 (1)103.215.74.112 (60)
184.105.139.99 (1)66.132.172.108 (29)
Port diary mentions
URL
#OMIGOD Exploits Captured in the Wild. Researchers responsible for half of scans for related ports.
User Comments
Submitted By Date
Comment
2021-09-21 00:21:14
Used by Open Management Infrastructure (OMI) framework. Actively Exploited. https://msrc-blog.microsoft.com/2021/09/16/additional-guidance-regarding-omi-vulnerabilities-within-azure-vm-management-extensions/ Also see port 5985/TCP, 5986/TCP, 1270/TCP
CVE Links
CVE # Description